vulnwire
7.5high

CVE-2017-8073

WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin.

Published 9 y ago · modified 4 mo ago · JSON

CVSS
7.5
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.1%
percentile 88%
Public exploits
0
none known

WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the irc_ctcp_dcc_filename_without_quotes function during quote removal, with a buffer overflow.

Exploit prediction (EPSS)

3.11% probability of exploitation in the next 30 days, higher than 88% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.07.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD2.05.0AV:N/AC:L/Au:N/C:N/I:N/A:P

Classification

Weakness
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

  • securityfocus.com /bid/97987 · vdb-entry, x_refsource_BID, x_transferred
  • weechat.org /download/security/ · x_refsource_CONFIRM, x_transferred
  • github.com /weechat/weechat/commit/2fb346f25f79e412cf0ed314fdf791763c19b70b · x_refsource_CONFIRM, x_transferred
  • weechat.org /news/95/20170422-Version-1.7.1/ · x_refsource_CONFIRM, x_transferred
  • debian.org /security/2017/dsa-3836 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • lists.fedoraproject.org /archives/list/package-announce%40lists.fedoraproject.org/message/4ASRTCQFFDAAK347URWNDH6N · vendor-advisory, x_refsource_FEDORA, x_transferred
  • lists.fedoraproject.org /archives/list/package-announce%40lists.fedoraproject.org/message/ER23GT23US5JXDLUZAMGMWXK · vendor-advisory, x_refsource_FEDORA, x_transferred
  • lists.fedoraproject.org /archives/list/package-announce%40lists.fedoraproject.org/message/M3LAJTLI3LWZRNCFYJ7PCBBT · vendor-advisory, x_refsource_FEDORA, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.